PofoliaShared via Pofolia

ACM Transactions on Computer Systems· 2014Q3

TaintDroid

William Enck, Peter Gilbert, Seungyeop Han, Vasant Tendulkar et al.

Short summary

TaintDroid is a system-wide dynamic taint tracking system for Android that monitors how third-party apps collect and share private data, incurring only 32% CPU overhead on benchmarks and negligible overhead on interactive apps.

AI-generated from the title and abstract; the full text is not read.

Key points

  • TaintDroid is a system-wide dynamic taint tracking system for Android.
  • It enables real-time analysis by leveraging Android's virtualized execution environment.
  • TaintDroid incurs only 32% performance overhead on CPU-bound microbenchmarks and negligible overhead on interactive applications.
  • Studies using TaintDroid found that a significant portion of popular third-party Android applications potentially misused users' private information.

AI-generated from the title and abstract; the full text is not read.

Abstract

Today’s smartphone operating systems frequently fail to provide users with visibility into how third-party applications collect and share their private data. We address these shortcomings with TaintDroid, an efficient, system-wide dynamic taint tracking and analysis system capable of simultaneously tracking multiple sources of sensitive data. TaintDroid enables realtime analysis by leveraging Android’s virtualized execution environment. TaintDroid incurs only 32% performance overhead on a CPU-bound microbenchmark and imposes negligible overhead on interactive third-party applications. Using TaintDroid to monitor the behavior of 30 popular third-party Android applications, in our 2010 study we found 20 applications potentially misused users’ private information; so did a similar fraction of the tested applications in our 2012 study. Monitoring the flow of privacy-sensitive data with TaintDroid provides valuable input for smartphone users and security service firms seeking to identify misbehaving applications.

The authors' abstract, as published at the source. ACM Transactions on Computer Systems, 2014 · DOI ↗

TakeawaysPremium
Ask the paperFree account

Continue with a free account

Ask the paper: 3 free questions a day about this paper; save it, get its citation, new summaries every day for your field. Takeaways are Premium.

Continue free on the web

Sign in with Google or Apple; no card needed. You come back to this paper.

On your phone:

Field: Signal Processing

Signal ProcessingComputer Science